Legal
Privacy Policy
Last updated: 8 July 2026
1. Who we are
Aureon Alight LTD, trading as AUREON LIGHT, is the data controller responsible for your personal data. We are registered in England and Wales, with our registered office at Suite A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE.
This policy explains what personal data we collect when you visit our website or buy from us, why we collect it, how we use it, and the rights you have over it, in line with the UK GDPR, the Data Protection Act 2018, and, where applicable, the EU GDPR.
2. What data we collect
| Category | Examples |
|---|---|
| Contact details | Name, email address, delivery and billing address, phone number |
| Order information | Products purchased, order value, order history |
| Payment information | Processed directly by our payment provider; we do not store full card numbers |
| Account information | Login details, saved addresses, order preferences, if you create an account |
| Marketing preferences | Whether you've subscribed to the Light List newsletter, and your engagement with our emails |
| Technical data | IP address, browser type, device information, pages visited, collected via cookies |
3. How we use your data
We only use your data where we have a valid legal basis to do so:
- To fulfil your order (performance of a contract) — processing payment, arranging delivery, handling returns and customer service queries.
- To send marketing communications (consent) — only if you've opted in to the Light List. You can unsubscribe at any time via the link in any email.
- To improve our website and service (legitimate interest) — understanding how visitors use our site, fixing issues, and testing improvements.
- To meet legal obligations (legal obligation) — such as keeping financial records for tax purposes.
- To prevent fraud (legitimate interest) — verifying orders and protecting against fraudulent transactions.
4. Cookies
We use cookies and similar technologies to run essential site functions (such as keeping items in your bag), to understand site usage through analytics, and, where you've consented, to personalise marketing. You can manage or disable non-essential cookies through your browser settings or any cookie preference banner shown on this site.
5. Who we share your data with
We do not sell your personal data. We share it only with trusted third parties who help us run our business, including:
- Payment processors, to securely handle transactions
- Courier and delivery partners, to fulfil and track your order
- Email and marketing platforms, to send order confirmations and, where consented, newsletters
- IT and hosting providers, to run and secure our website
- Regulators or authorities, where required by law
Each of these third parties is only given the data they need to perform their specific service, and is bound by data protection obligations at least as strict as our own.
6. International transfers
As we ship to both the UK and the European Union, some of your data may be processed by service providers based outside your home country. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent legal mechanisms.
7. How long we keep your data
We retain order and transaction data for as long as necessary to meet our legal and tax obligations — typically up to 6 years. Marketing data is kept until you unsubscribe or withdraw consent. Account data is kept for as long as your account remains active, and deleted within a reasonable period after closure, unless we're required to keep it for legal reasons.
8. Your rights
Under the UK GDPR and EU GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data, where applicable
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
- Complain to a supervisory authority — in the UK, this is the Information Commissioner's Office (ICO); EU residents may also contact their local data protection authority
To exercise any of these rights, contact us using the details below. We will respond within one month, as required by law.
9. How we protect your data
We use industry-standard security measures — including encrypted checkout, restricted internal access, and secure hosting — to protect your data against unauthorised access, loss, or misuse. No online service can guarantee absolute security, but we review our practices regularly.
10. Children’s privacy
Our website and products are intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. Material changes will be highlighted on this page with a new "last updated" date.
12. Contact us
For any questions about this policy or your personal data, write to us at: Aureon Alight LTD, Suite A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE.